Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File: bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier: 73Qj0damYGWiCi1fX/xY3aA3JvVg9SYBbk57m2lQhuU=
Subject key identifier: E5:A1:64:63:F3:87:D2:B9:5A:E6:65:47:13:56:F8:00:88:AA:7B:1D
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 0197B9342F844DF6674ADC0049C3827CCD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 01:01:34 +0000
Manifest this update: Sun 29 Jun 2025 01:01:34 +0000
Manifest next update: Mon 30 Jun 2025 01:01:34 +0000
Files and hashes: 1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: NcpvLzTglkU2jgumKDRJUr71KwqC+PZB2igcYAOHbEw=)
2: z4IVFfra9dO93PZl7xdhmVhqzoE.roa (hash: 90ivV2dV0BSclFTId5ah7Fo9mKfLvO9taEvtncU7b/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:2f:84:4d:f6:67:4a:dc:00:49:c3:82:7c:cd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Jun 29 01:01:34 2025 GMT
Not After : Jun 30 01:01:34 2025 GMT
Subject: CN=e5a16463f387d2b95ae665471356f80088aa7b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:72:c8:a5:26:82:5a:5e:74:4e:63:48:a8:0c:
d7:71:dc:56:ba:72:a3:3f:76:ad:95:64:1a:8a:93:
05:5c:6b:b5:c3:0c:b3:ba:bd:3f:a7:64:d5:fe:a7:
ad:12:9d:2c:35:54:f2:58:67:1e:a9:2c:26:02:6a:
46:70:67:8e:02:94:8a:f1:73:57:b4:c1:2c:d4:57:
8b:1d:5e:e6:80:76:7a:85:37:fc:db:f3:26:32:c2:
71:d5:47:19:ff:d8:ef:de:02:fe:8b:a8:35:f2:bf:
ad:6d:8e:50:34:72:89:15:93:a9:27:84:06:b1:2d:
c2:71:89:5d:4c:fc:f6:35:bb:26:4f:05:ac:eb:5e:
33:71:86:8b:1a:53:23:e2:b6:24:42:5e:f9:e5:14:
66:43:87:37:e8:93:a7:7f:c8:72:1b:ff:60:54:67:
0d:d4:19:e1:b1:8c:d7:76:e0:cb:bd:5f:0a:9f:b2:
83:26:ff:43:a4:a7:7a:0c:f3:a3:06:cf:9d:e6:f0:
b6:27:52:47:7b:1b:42:97:30:16:11:c7:52:c0:09:
73:48:93:a8:fb:e2:e1:da:01:fd:7c:c3:db:10:f3:
49:63:65:72:d8:02:d6:12:80:e6:10:00:57:06:ef:
e5:b9:f8:c3:bc:5e:36:43:bc:db:f4:1d:5b:f0:4f:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A1:64:63:F3:87:D2:B9:5A:E6:65:47:13:56:F8:00:88:AA:7B:1D
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:54:27:e1:47:fe:9e:67:6a:a9:17:58:bd:97:b2:1d:22:08:
a3:79:11:c0:80:53:e7:de:28:12:4d:8d:2e:ea:7b:f1:27:78:
90:77:64:54:4a:76:6e:f2:c5:5d:37:18:6d:df:7b:8a:7c:2c:
36:1d:b0:98:0b:c0:1b:4d:ce:18:10:eb:d9:af:6e:82:fd:7c:
33:cd:fd:57:c5:7e:f4:1e:cf:18:4e:ed:2b:8f:12:76:58:04:
90:2b:3d:be:9c:16:8b:2f:4b:a5:0d:e8:68:cf:86:83:a0:c8:
88:ac:39:54:97:ae:7f:fe:57:09:92:0a:07:05:f3:09:1e:e0:
8c:46:7d:a9:00:d0:0d:9d:15:71:01:85:5e:2f:77:85:74:60:
9a:05:9e:30:f0:a0:1f:17:d0:98:a9:4b:c9:8f:e7:7b:a9:43:
1b:9d:82:ba:87:d8:b0:fa:f4:05:c2:48:de:b0:df:53:b9:51:
a8:84:90:7c:39:89:04:d7:f1:2d:c4:9d:96:d2:25:10:17:28:
e3:f2:35:18:ad:7b:37:e9:5a:da:09:5c:04:07:dc:7b:03:8d:
29:d8:5a:1f:75:39:87:3a:05:3b:cb:44:54:a4:c2:46:7c:28:
93:ff:bd:9c:2f:7b:d4:7e:7e:de:9c:f7:43:f5:a3:02:a8:77:
f9:83:af:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:05:18 2025 by rpki-client